Gentoo Linux Security Advisory GLSA 200505-10 – phpBB is vulnerable to a cross-site scripting vulnerability due to improper sanitization of user supplied input. Coupled with poor validation of BBCode URLs which may be included in a forum post, an unsuspecting user may follow a posted link triggering the vulnerability. Versions less than 2.0.15 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/38417/glsa-200505-10.txt
Source: https://packetstormsecurity.com/files/38417/Gentoo-Linux-Security-Advisory-200505-10.html